EMOTET Configuration Extractor
Python script to extract the configuration from EMOTET samples.
Emotet
Loader/Dropper
Notorious banking trojan turned modular malware loader. Repeatedly disrupted by law enforcement but resurfaces. Primary delivery mechanism for TrickBot and Ryuk.
Also known as: emotet, emotet botnet, geodo, heodo
AI Intelligence Brief cached
Related YARA Rules View all on YARA Rules page →
90-Day Activity
All Articles (2)
Last 90 Days
All Time
EMOTET Dynamic Configuration Extraction
Elastic Security Labs discusses the EMOTET trojan and is releasing a tool to dynamically extract configuration files using code emulators.